Working on clients' Rev360 profiles safely
How a firm should access Nigerian clients' Rev360 profiles through adviser access rather than shared logins, who may file, and how filings are recorded.
By Achekam · · 4 min read · For Accountants & audit firms in Nigeria
In many Nigerian firms, the client's tax portal password lives in a spreadsheet. It was shared years ago so that the firm could file on the client's behalf, and it has passed through several staff members since. Some of them have left. Nobody is sure who still knows it, and nobody can tell from the portal which person at the firm filed which return.
That arrangement was common because the old systems made it easy. Rev360 gives firms a better way. This article explains the move from TaxPro Max, how adviser access works without sharing credentials, how to decide who at the firm may file, and how filings are recorded in Achekam.
Rev360 replaced TaxPro Max
The NRS launched Rev360, at selfservice.nrs.gov.ng, on 30 April 2026 to replace TaxPro Max for registration, filing, payments, refunds and tax clearance certificates. It is being rolled out in phases. TaxPro Max profiles, history and balances were migrated automatically.
Returns are filed on Rev360 by Excel upload or web form. The research behind Achekam found no public NRS system-to-system interface for filing returns, which is why filing remains a task done by a person on the portal.
Role-based access for tax advisers
The important change for firms is that Rev360 gives tax advisers role-based access without sharing credentials. The adviser works in the client's profile under their own identity, with the access the client has given them.
The NRS page on the Tax Consultants Portal explains how tax practitioners register as consultants using their own Tax ID, add client profiles, and file returns, pay taxes and manage clearance certificates on clients' behalf.
Why it matters:
- Accountability. Each filing can be traced to the person who made it, not to "the client's login".
- Leavers. When a staff member leaves, their access ends with their identity. No client password needs changing.
- The client's control. The client decides who acts for it and can withdraw that access.
- Confidentiality. The firm no longer holds clients' passwords, so it cannot lose them.
Moving clients over
A transition plan for a firm with many Nigerian clients:
- List every client for which the firm holds portal credentials today.
- Register the firm's advisers as consultants on Rev360, each under their own Tax ID.
- Ask each client to give the named advisers access to its profile, and confirm the access works.
- Once it does, ask the client to change its own password, and delete the stored credentials from the firm's records.
- Record, per client, which advisers have access.
Because the roll-out is phased, some functions may not yet be available for every tax. Check what can be done on Rev360 for each obligation before a deadline, rather than on the day.
Some clients will resist. An owner who has always let the accountant "just log in" may see the change as extra work. Explain it in the client's terms: the business keeps control of its own profile, it can see which adviser acted for it, and it no longer depends on a password sitting in someone else's files. Most owners, once they understand that, prefer it. For a client who still refuses, record the refusal and the firm's advice on the client's file, so the firm's position is clear if a problem arises later.
Who at the firm may file
Rev360 decides who can act on the portal. Achekam has its own control over who can record a filing in the firm's system, and the two should match.
No role in Achekam receives the Nigerian filing permission, NG_NRS_FILE, by default; a firm grants it to named people only. Partners receive every other Nigerian pack permission by default, but not this one. That design reflects the portal: filing is a named responsibility, not a role.
| Control | Where | Who should hold it |
|---|---|---|
| Adviser access to the client's profile | Rev360 | The named advisers who file for that client |
| Filing permission | Achekam | The same named people |
| Verifying a recorded filing | Achekam | A different person |
Keep the two lists aligned. A person who can file on Rev360 but not record it in Achekam leaves a gap in the firm's records; a person who can record filings they cannot make is a risk.
There is a caveat. The research behind these articles found no screen that grants the filing permission, so recording a filing in Achekam may be unreachable. Test it with one named person before the season. If it cannot be granted, keep the Rev360 receipt on the client's file, with a note of who filed and when.
Recording the filing in Achekam
Returns are prepared in Achekam's Revenue Service Centre, where staff open a Nigerian tax profile for a client and start returns that move through prepare, review and approve by different people. Achekam does not file Nigerian tax returns. A person with the firm's NRS filing permission files on Rev360 and uploads the receipt, and a different person verifies it before the return counts as filed.
The verifier compares the receipt with the approved return: the right client, tax and period, and the figures filed matching the figures approved. That second look catches the classic error of uploading last month's template. The full workflow is set out in the Nigerian and Kenyan tax return workflow, and the company return's timetable in Nigerian company self-assessment returns.
This month
Find out how many client passwords the firm still holds. Pick the five largest clients, move them to adviser access on Rev360 this month, and delete their stored credentials once the access is confirmed. Then grant the Achekam filing permission to the same named advisers.
General guidance only, not advice on your own circumstances. Tax and payroll rules change: check the current position with the authority or your adviser.
